$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa File: 5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa (raw, json) Hash identifier: QcsTb9WELHZiWB49DLIZDN1+n6n48zhIad4M76A10j0= Subject key identifier: 23:D4:0F:9D:88:A2:34:4D:F8:89:EA:D3:F8:C5:35:B1:CA:68:2D:D6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BF4216DA21100EC0B780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:42:16:da:21:10:0e:c0:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8d3466c9-cbcb-40d7-9b33-9511b0fc8fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:18:f8:e5:3c:df:c2:37:fb:42:c0:7a:9d: 5e:9e:01:80:18:e5:e7:4f:2b:0e:ba:75:1c:c4:7b: 9b:da:59:c5:cf:f0:eb:86:fe:bd:66:cd:d3:67:a2: 7e:87:7d:cf:bc:84:cb:4e:09:64:f2:15:01:8c:96: bb:ac:12:53:1a:52:ec:35:6d:cb:b4:80:f4:4b:16: ac:af:2d:27:38:3a:2f:37:f8:05:6d:af:98:09:80: 8c:4f:c3:a3:72:c9:5f:9a:b8:32:dc:55:cc:78:4a: f7:47:e2:3f:96:d5:db:d8:05:a7:eb:59:d8:5f:ec: fa:fe:2f:b6:60:eb:36:47:de:bf:cd:3a:09:99:c3: 6d:ef:df:e3:99:99:20:9e:7d:00:2e:d7:01:f1:5a: c7:6b:26:0c:77:e9:41:1b:ef:c0:78:fd:17:e9:e1: 7f:d9:fc:38:e7:f1:59:f3:4e:4d:7b:c3:2d:cf:85: b1:8a:a8:9e:a2:79:b3:1d:d4:16:15:84:44:02:04: cd:15:71:d3:fd:9a:85:5b:60:58:a3:08:2f:ef:aa: 14:51:bc:df:8c:82:50:30:0d:9f:4d:8b:a6:72:bc: 45:6e:1a:b5:35:b5:7b:e7:8c:8a:91:26:5c:14:98: 25:6f:3c:3d:ef:a4:38:b1:f1:7b:d9:5d:e1:65:b5: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D4:0F:9D:88:A2:34:4D:F8:89:EA:D3:F8:C5:35:B1:CA:68:2D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:5e:ad:20:94:3a:14:e1:dd:00:28:04:7a:09:7a:d0:dd:f2: 4d:ec:0b:4a:4c:7d:88:28:88:96:db:c6:e3:66:5c:ba:88:66: 34:d8:54:83:71:ca:e4:47:ed:81:e0:3c:29:9d:ec:22:f7:d1: ae:8a:09:8c:05:e4:31:41:34:74:6a:51:0c:c3:44:6c:1a:3f: ae:b4:cc:e0:cb:05:bb:f0:07:09:2e:41:c0:02:49:66:a0:db: 18:6a:91:88:c7:45:24:73:30:5c:2d:67:f8:e4:03:91:8e:23: 36:4e:5e:46:61:9a:a0:42:f3:ff:32:e4:6f:c8:4e:19:aa:cd: 40:ca:82:01:e0:52:f0:70:aa:04:78:0a:d0:36:9b:0b:2e:b8: f0:25:22:9d:ec:07:41:e3:1c:2a:40:fa:bc:69:59:c5:e1:54: 14:76:ee:40:84:b9:2a:d7:9b:08:69:59:77:7a:52:40:32:cb: 62:33:48:a1:78:d5:44:1d:0f:03:5a:29:8a:35:c5:da:76:23: ac:78:f2:ce:ad:75:67:2b:c6:7d:21:59:fd:50:c3:35:0a:ba: cc:dd:6c:2e:60:6a:9a:89:7b:07:05:0c:d4:2f:fd:fe:d1:31: fb:70:05:6d:39:e6:0b:d9:4f:30:19:50:23:c6:0e:27:33:a6: b9:9e:f1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL9CFtohEA7At4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGQzNDY2YzktY2JjYi00MGQ3LTliMzMtOTUxMWIwZmM4ZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPAY+OU838I3+0LAep1engGAGOXnTysOunUc xHub2lnFz/Drhv69Zs3TZ6J+h33PvITLTglk8hUBjJa7rBJTGlLsNW3LtID0Sxas ry0nODovN/gFba+YCYCMT8Ojcslfmrgy3FXMeEr3R+I/ltXb2AWn61nYX+z6/i+2 YOs2R96/zToJmcNt79/jmZkgnn0ALtcB8VrHayYMd+lBG+/AeP0X6eF/2fw45/FZ 805Ne8Mtz4WxiqieonmzHdQWFYREAgTNFXHT/ZqFW2BYowgv76oUUbzfjIJQMA2f TYumcrxFbhq1NbV754yKkSZcFJglbzw976Q4sfF72V3hZbUvTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPUD52IojRN+Inq0/jFNbHKaC3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWQ2YTU3NGEtZTZiMC0z M2NkLTk0YjQtMDM4MTZiODRmZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRerSCUOhTh3QAoBHoJetDd8k3sC0pMfYgoiJbbxuNmXLqIZjTYVINx yuRH7YHgPCmd7CL30a6KCYwF5DFBNHRqUQzDRGwaP660zODLBbvwBwkuQcACSWag 2xhqkYjHRSRzMFwtZ/jkA5GOIzZOXkZhmqBC8/8y5G/IThmqzUDKggHgUvBwqgR4 CtA2mwsuuPAlIp3sB0HjHCpA+rxpWcXhVBR27kCEuSrXmwhpWXd6UkAyy2IzSKF4 1UQdDwNaKYo1xdp2I6x48s6tdWcrxn0hWf1QwzUKuszdbC5gapqJewcFDNQv/f7R MftwBW055gvZTzAZUCPGDiczprme8SA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:44:31 2026 by rpki-client